EUVD-2015-5373

Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2876...

CVE-2015-5416

Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2875...

CVE-2015-5424

Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2885...

EUVD-2015-5375

Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2879...

CVE-2015-5419

HP KeyView contains a remote code execution vulnerability (CVE-2015-5419) affecting versions before 10.23.0.1 and 10.24.x before 10.24.0.1. The issue stems from GIF parsing handling, allowing a remote attacker to execute arbitrary code when a user opens a crafted GIF or visits a malicious page/fi...

CVE-2015-5422

HP KeyView (versions prior to 10.23.0.1 and prior to 10.24.0.1) is affected by remote-code-execution vulnerabilities identified as CVE-2015-5422, with exploit details tied to ZDI-CAN-2883 and a related ZDI advisory for AutoCAD parsing (ZDI-15-403). The issues allow remote code execution via unkno...

CVE-2015-5416

HP KeyView (affected versions: prior to 10.23.0.1 and prior to 10.24.0.1 in the 10.24 line) contains a GIF parsing vulnerability that can lead to remote code execution. According to ZDI-15-397, the flaw is a buffer overflow triggered by a crafted GIF image (specifically oversized ImageWidth) and ...

CVE-2015-5423

HP KeyView is affected by CVE-2015-5423. The vulnerability resides in HP KeyView’s HTML parsing/IDOL handling, where a buffer overflow could allow remote code execution. It requires user interaction (opening a malicious page or file). Remediate by upgrading to HP KeyView 10.23.0.1 or 10.24.0.1 as...

CVE-2015-5611

CVE-2015-5611 covers a missing authentication vulnerability in FCA Uconnect infotainment systems (Uconnect 8.4AN/RA3/RA4) used in 2013–2015 FCA vehicles. The root cause is unauthenticated access allowing remote commands via the entertainment-system firmware and CAN bus due to insufficient Radio s...

CVE-2015-5611

Unspecified vulnerability in Uconnect before 15.26.1, as used in certain Fiat Chrysler Automobiles FCA from 2013 to 2015 models, allows remote attackers in the same cellular network to control vehicle movement, cause human harm or physical damage, or modify dashboard settings via vectors related ...

Stack overflow

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699...

CVE-2015-0795

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699...

CVE-2015-0795

CVE-2015-0795 affects NetIQ Security Solutions for ISeries. The NetIQExecObject.NetIQExec.1 ActiveX Control’s SafeShellExecute method in NetIQExec.dll contains a stack-based buffer overflow when processing long parameters, enabling remote code execution in affected installations of version 8.1. T...

HTTP Methods (CAN-2003-0109; CVE-2007-1560; CVE-2015-1499)

...

Code injection

HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the 1 HttpServlet or 2 NetworkEditorController component, aka ZDI-CAN-2569...

CVE-2015-2121

HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the 1 HttpServlet or 2 NetworkEditorController component, aka ZDI-CAN-2569...

CVE-2015-2120

Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567...

Code injection

Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567...

CVE-2015-2120

Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567...

CVE-2015-2120

HP SiteScope CVE-2015-2120 is a remote privilege-escalation flaw in the Log Analysis Tool that arises from improper log-path validation, allowing an authenticated remote user to read the users.config file and escalate privileges to administrator. Affected: SiteScope v11.1x (before 11.13), v11.2x ...